Selinux Fun

[Alan J. Gagne]

Here are a few. I'm proably missing a couple.

type=KERNEL msg=audit(1111959628.755:7920758): avc:  denied  { execmod }
for  pid=4999 comm=java
path=/tmp/OraInstall2005-03-27_04-40-25PM/jre/1.4.2/lib/i386/libawt.so
dev=dm-0 ino=24805454 scontext=user_u:system_r:unconfined_t
tcontext=user_u:object_r:tmp_t tclass=file

type=KERNEL msg=audit(1111964279.919:4868244): avc:  denied  { execmod }
for  pid=11157 comm=sqlplus
path=/home/oracle/product/10.1.0.3/db_1/lib/libnnz10.so dev=dm-0
ino=22156870 scontext=user_u:system_r:unconfined_t
tcontext=user_u:object_r:default_t tclass=file

type=KERNEL msg=audit(1111886867.258:4765664): avc:  denied  { execmod }
for  pid=14855 comm=acroread
path=/usr/local/Acrobat5/Reader/intellinux/plug_ins/EScript.api dev=dm-0
ino=17137671 scontext=user_u:system_r:unconfined_t
tcontext=root:object_r:usr_t tclass=file type=KERNEL 

type=KERNEL msg=audit(1111886872.812:4776455): avc:  denied  { execmod }
for  pid=14855 comm=acroread
path=/usr/local/Acrobat5/Reader/intellinux/plug_ins/AcroForm.api
dev=dm-0 ino=17137670 scontext=user_u:system_r:unconfined_t
tcontext=root:object_r:usr_t tclass=file

type=KERNEL msg=audit(1111869963.161:9878793): avc:  denied  { execmod }
for  pid=4025 comm=sqlplus
path=/usr/local/oracle/10.1.0.3/instantclient/libnnz10.so dev=dm-0
ino=17072136 scontext=root:system_r:unconfined_t
tcontext=root:object_r:usr_t tclass=file

type=KERNEL msg=audit(1112056858.614:16116284): avc:  denied
{ execmod } for  pid=3745 comm=lsnrctl
path=/home/oracle/product/10.1.0.3/db_1/lib/libnnz10.so dev=dm-0
ino=22156870 scontext=user_u:system_r:unconfined_t
tcontext=user_u:object_r:default_t tclass=file

I am also see this denial which I have not tried to correct yet.

type=KERNEL msg=audit(1112065394.195:532494): avc:  denied  { search }
for  pid=10489 exe=/sbin/ifconfig name=oracle dev=dm-0 ino=21528581
scontext=oracle:system_r:ifconfig_t
tcontext=user_u:object_r:user_home_dir_t tclass=dir


Alan